kubernetes

LinkedIn describes replacing Argo CD with its own GitOps engine for application deployments, keeping it for add-ons and system services; infra failures fell from 925 to 63, but LinkedIn says not all of that is the engine.

Google says the three projects are in CNCF Sandbox onboarding and Agent Substrate 1.0 is GA on GKE; it says neutral governance opens a path to upstream gVisor kernel patches, while LWN's 2022 report on one proposal records technical objections.

Sources on four 2026 changes show four notice models: a published Node.js calendar, Microsoft's 12-month minimum for ASP.NET Core 2.3, a Python Steering Council window for the JIT, and Kubernetes version targets.

Sources on Kubernetes 1.37, EKS and GKE show retirement timelines for kube-proxy's IPVS mode and kube-dns packages, control-plane rollback on EKS and GKE, and EKS extended support at $0.60 per cluster-hour versus $0.10.

Dynamo v1.6.0, published October 22, adds request-classifier plugins to its router, LPU-backed LPX components for Kubernetes, and snapshot-backed engine failover, and moves to SGLang v0.5.21 and vLLM v0.31.0.

llm-d v1.0.0, published October 20, aligns component versions across its organization, moves the router configuration API to v1, adds DisaggregatedSet and deprecates its own ROCm image build.

Helm published patch releases 4.3.1 and 3.22.1 on October 15. Both bump golang.org/x/net; the 3.22.1 changelog cites five Go vulnerability IDs, and the 4.3.1 notes cite none.

Istio's patch releases fix a High-severity AuthorizationPolicy bypass over HTTP/2 (CVSS 7.4) and a mesh-wide istiod crash in ambient mode (CVSS 7.7), per GitHub advisories.

containerd 2.4.2, 2.3.7, 2.2.10 and 2.0.14 shipped October 13 with fixes for four Moderate-rated advisories, split unevenly by branch; 2.0.14 lists one.

Google's GKE release notes say the microVM sandbox type, built on Kata Containers and Cloud Hypervisor, became generally available October 7; Google's docs list nested virtualization as a requirement.

The Argo CD project released patched versions on October 6, 2026 covering eight security advisories; GitHub lists four as Critical with a 9.9 CVSS score. Older minor lines get no patch.

A Kubernetes Blog post reports that Local SSD-backed node swap raised pod density by 25% to 200% in tests of sandboxed browsers and Python runtimes, while project docs warn of noisy-neighbor risks.